$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e414815d-fe75-3425-ad59-194ad9e2d24c.roa File: e414815d-fe75-3425-ad59-194ad9e2d24c.roa (raw, json) Hash identifier: hAuBsVzR/REIqDTs5cWe0iKT+AfTjFMCZ3b2GPrJs+s= Subject key identifier: 35:3C:33:1C:98:99:70:43:F7:87:0D:EF:8C:81:24:43:9F:E8:F8:A1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584770CB99936908868DEA640000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e414815d-fe75-3425-ad59-194ad9e2d24c.roa Signing time: Sat 05 Oct 2024 13:00:42 +0000 ROA not before: Sat 05 Oct 2024 13:00:42 +0000 ROA not after: Fri 03 Jan 2025 14:00:42 +0000 asID: 151872 IP address blocks: 2001:470:338::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:70:cb:99:93:69:08:86:8d:ea:64:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 5 13:00:42 2024 GMT Not After : Jan 3 14:00:42 2025 GMT Subject: CN=94d2255f-a267-46e3-a44b-ed5be5a2c785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:2e:62:38:77:ef:4d:33:71:cf:2b:45:88: a9:78:af:e4:4d:14:b0:91:5e:62:0b:9c:e9:0b:fb: 7a:d1:5a:c4:da:6f:4c:19:a2:5d:e2:68:73:dc:80: 02:cc:56:86:02:96:0e:dd:a1:89:cd:db:72:d5:af: 7c:34:23:14:c2:60:be:e8:8e:1a:9c:3f:10:90:3d: be:fb:26:e1:d1:1d:68:9b:4c:f1:12:8d:a0:02:97: d8:81:0c:01:1e:32:7d:43:42:e4:5d:c5:56:e3:5b: 94:2d:65:55:c9:34:15:b0:0b:f0:54:d1:81:2e:e0: 84:a8:71:8e:31:b0:51:23:f7:9b:ec:be:ed:d3:08: d8:fa:c7:f6:42:31:12:58:99:6d:5f:a6:2a:4f:c6: f3:76:16:eb:6e:db:fc:09:d0:43:38:ce:c4:0b:4d: ac:22:6a:ad:fa:a1:4a:2f:2f:44:36:55:cf:96:3f: 07:03:cc:12:bd:7e:0d:11:79:62:30:24:85:48:53: c1:d1:f2:87:44:bd:ec:62:b9:e0:dd:9d:eb:93:fc: b9:f0:69:4b:6a:cb:0e:cd:af:12:a3:fb:96:65:ce: ee:e4:a0:3c:27:21:26:1b:e7:33:ba:b3:70:a4:53: f3:06:63:8e:d9:fe:28:c6:9a:14:5b:7d:41:8b:4e: 8d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3C:33:1C:98:99:70:43:F7:87:0D:EF:8C:81:24:43:9F:E8:F8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e414815d-fe75-3425-ad59-194ad9e2d24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:338::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:64:bc:4d:a9:ac:d6:84:96:b7:24:87:89:34:9f:66:69:2a: 1c:1f:c4:3e:52:a2:50:6c:6b:5f:67:35:3c:77:96:9e:d6:6c: 88:bc:92:d2:3e:28:4f:c5:1d:37:ea:2f:11:c0:8e:2c:ca:92: 99:3f:03:bc:3f:bb:23:56:a5:82:aa:18:5e:20:84:e1:57:1a: 10:dc:7b:0c:d3:a0:15:c1:52:56:16:05:aa:85:d7:49:2a:d7: d9:e9:59:99:b0:4a:9d:a0:e2:f2:ec:a8:96:86:b3:aa:30:e3: 2c:5e:df:60:41:29:82:c8:0f:ba:97:94:55:1d:7e:18:9f:bf: 20:2e:f5:68:63:ef:b1:17:56:55:bc:e8:b4:5c:22:a4:c8:6a: ba:87:30:3b:5d:49:55:9f:22:1d:df:da:d6:36:ab:66:46:e7: 19:e7:4e:d0:47:a1:c2:90:c6:3c:49:50:1d:10:1c:63:da:eb: 68:2d:41:10:81:10:86:1b:95:cb:f3:b1:86:5c:94:84:1a:a0: 23:0b:52:f9:c0:de:33:2d:8e:78:e6:2e:38:ff:67:fd:9e:cd: 95:fa:ad:5e:3f:c4:89:ab:1e:9c:e8:cb:4a:8a:38:f8:1d:32: d7:8d:86:49:b9:68:f1:89:e6:b1:7d:0c:8d:36:3c:b0:66:2f: d4:26:5a:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdwy5mTaQiGjepkAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI0MTAwNTEzMDA0MloXDTI1MDEwMzE0MDA0MlowLzEtMCsGA1UEAxMk OTRkMjI1NWYtYTI2Ny00NmUzLWE0NGItZWQ1YmU1YTJjNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqEuYjh3700zcc8rRYipeK/kTRSwkV5iC5zp C/t60VrE2m9MGaJd4mhz3IACzFaGApYO3aGJzdty1a98NCMUwmC+6I4anD8QkD2+ +ybh0R1om0zxEo2gApfYgQwBHjJ9Q0LkXcVW41uULWVVyTQVsAvwVNGBLuCEqHGO MbBRI/eb7L7t0wjY+sf2QjESWJltX6YqT8bzdhbrbtv8CdBDOM7EC02sImqt+qFK Ly9ENlXPlj8HA8wSvX4NEXliMCSFSFPB0fKHRL3sYrng3Z3rk/y58GlLassOza8S o/uWZc7u5KA8JyEmG+czurNwpFPzBmOO2f4oxpoUW31Bi06NDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDU8MxyYmXBD94cN74yBJEOf6PihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTQxNDgxNWQtZmU3NS0z NDI1LWFkNTktMTk0YWQ5ZTJkMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALtkvE2prNaElrckh4k0n2ZpKhwfxD5SolBsa19nNTx3lp7WbIi8 ktI+KE/FHTfqLxHAjizKkpk/A7w/uyNWpYKqGF4ghOFXGhDcewzToBXBUlYWBaqF 10kq19npWZmwSp2g4vLsqJaGs6ow4yxe32BBKYLID7qXlFUdfhifvyAu9Whj77EX VlW86LRcIqTIarqHMDtdSVWfIh3f2tY2q2ZG5xnnTtBHocKQxjxJUB0QHGPa62gt QRCBEIYblcvzsYZclIQaoCMLUvnA3jMtjnjmLjj/Z/2ezZX6rV4/xImrHpzoy0qK OPgdMteNhkm5aPGJ5rF9DI02PLBmL9QmWgA= -----END CERTIFICATE-----Generated at Fri Nov 22 04:51:30 2024 by rpki-client on console-ams.rpki-client.org